Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
File:                     5EC020FF41231134DE16F43F92714D434626A05B.mft (raw, json)
Hash identifier:          n5BV8DkDyvWB1LxxIg7gKt4wtlnNzza3JJ/nNaX2X+Q=
Subject key identifier:   78:90:5C:BF:3F:13:02:EF:19:02:45:03:B9:8B:7E:25:CF:61:1A:62
Authority key identifier: 5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B
Certificate issuer:       /CN=5EC020FF41231134DE16F43F92714D434626A05B
Certificate serial:       2D8B51F36A0E072680F91473C57467997E5C3110
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
Manifest number:          13
Signing time:             Fri 15 May 2026 14:02:24 +0000
Manifest this update:     Fri 15 May 2026 13:57:24 +0000
Manifest next update:     Sat 16 May 2026 17:16:24 +0000
Files and hashes:         1: 323030313a6466303a373434303a3a2f34382d3438203d3e20313331313132.roa (hash: mxf66wCv3huHr7+y00gKhj0SFSiQHrPhglnN0dDJ4UY=)
                          2: 3130332e362e3231342e302f32342d3234203d3e20313331313132.roa (hash: 7EVkvK54oj3Ks8SpMiOp0AT2jMsnJWuUCj85YBui5p0=)
                          3: 5EC020FF41231134DE16F43F92714D434626A05B.crl (hash: pN2jvamzZVe/voKdFMxvZnzukA45hrCbgRWF29YO1GM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl
                          rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 17:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8b:51:f3:6a:0e:07:26:80:f9:14:73:c5:74:67:99:7e:5c:31:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EC020FF41231134DE16F43F92714D434626A05B
        Validity
            Not Before: May 15 13:57:24 2026 GMT
            Not After : May 16 17:16:24 2026 GMT
        Subject: CN=78905CBF3F1302EF19024503B98B7E25CF611A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:9d:ad:f2:79:59:82:9b:62:28:f1:88:05:
                    70:15:0c:03:45:3a:e6:ee:4d:22:0e:5a:ac:be:52:
                    35:4e:6e:fc:d8:2f:a5:56:34:4e:30:8c:f6:a1:15:
                    62:09:06:cf:38:eb:7c:5f:4a:39:28:6e:71:8e:28:
                    90:c5:68:fb:e1:21:50:c6:8d:21:38:cc:ce:49:0e:
                    32:03:9c:1e:e0:d2:ce:4c:c0:9d:f7:64:df:2e:69:
                    9f:51:d6:c7:f2:40:32:b3:b5:c1:fd:1d:aa:9b:56:
                    88:d9:23:c2:62:8f:d9:e5:a3:43:a4:95:f6:64:e7:
                    b5:5a:f9:7c:b3:71:bc:5c:e0:a7:9a:3c:57:92:15:
                    d4:5b:44:63:dd:3a:15:4f:33:c3:a3:fb:43:20:f2:
                    2c:5e:d3:66:34:6e:3d:cf:ce:43:bf:a6:42:94:ac:
                    17:b3:5d:48:95:b3:c8:12:45:98:69:d2:a0:d3:0a:
                    a7:56:d7:a2:c9:c4:92:35:c5:5e:0e:ea:77:a4:93:
                    46:91:b4:ce:95:37:48:42:e9:d7:96:0d:38:cc:f9:
                    20:3d:e5:9d:df:ea:97:42:ae:26:e3:e2:ad:a3:2d:
                    aa:c3:e7:2c:ae:02:90:f4:1f:4d:2f:8c:af:af:53:
                    43:45:c0:8d:0b:fd:f1:94:81:be:c8:8f:11:1b:61:
                    fb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:90:5C:BF:3F:13:02:EF:19:02:45:03:B9:8B:7E:25:CF:61:1A:62
            X509v3 Authority Key Identifier:
                keyid:5E:C0:20:FF:41:23:11:34:DE:16:F4:3F:92:71:4D:43:46:26:A0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EC020FF41231134DE16F43F92714D434626A05B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/5EC020FF41231134DE16F43F92714D434626A05B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:1f:0f:1e:7a:37:83:34:d1:9e:03:9a:86:c5:2d:9c:36:
         f5:05:0f:9e:64:6b:22:6d:09:f0:d2:b5:4b:1e:e6:7c:e7:ef:
         36:9c:d1:4c:39:ad:c6:db:24:d9:67:76:cd:3d:d7:07:39:83:
         a9:4f:09:d1:00:62:d4:29:bf:c4:cb:05:d7:ec:07:9a:9f:77:
         01:fa:34:85:9b:1c:bc:a9:25:de:a4:f6:bb:0e:db:e4:40:87:
         55:4f:9d:99:07:b1:31:0f:34:55:7c:ab:18:47:50:82:a3:25:
         7f:a8:1c:74:6a:df:40:e2:bb:2a:9b:7f:4f:ec:cb:38:ad:b6:
         3b:66:d8:70:24:b8:02:a1:10:37:ca:00:2f:74:e8:d9:61:2e:
         40:dd:69:17:19:a1:6a:fb:ac:fa:c7:91:de:92:6a:94:8b:37:
         3e:5a:d9:2f:98:eb:77:1d:fe:05:51:71:9a:48:5a:12:c7:df:
         8a:a6:36:15:54:c8:c9:f9:d7:a2:08:54:6b:d1:09:12:50:6b:
         47:bf:48:6d:62:dd:f9:87:c2:b7:40:10:47:4d:66:1e:63:31:
         e2:31:12:37:bb:0b:e1:db:da:07:61:a2:b0:00:78:1d:2c:89:
         05:40:3a:17:ac:e6:cd:84:d9:2c:f9:c7:84:b2:06:a9:b9:74:
         d2:87:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 11:04:51 2026 by rpki-client